All Apps and Add-ons

How to set earliest and latest time based on timestamp minus/plus a static time?

SRF1LO
Engager

I know there are some similar questions asked and I've read through them, but none quite gives what I want.

Here is my problem:
I have one dashboard with several panels. On one of the panel which is a timechart, I have set the token to be the timestamp when the user randomly click on the chart. What I want to to achieve is that when the user click on the particular timestamp, another timechart on another panel should change the display to +/- 1 hour from the timestamp.

I know that the earliest and latest can be set to timestamp, but how to make them become +/-1 hour from the token value, like this:

<earliest>$timestamp$-3600</earliest>
<latest>$timestamp$+3600</latest>

But this does not work, so I am wondering whether is there any way for me to do it?

Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...